How to block software updates on the Amazon Fire TV or Fire TV Stick

All versions of the Amazon Fire TV will download and install software updates automatically. There is no option to disable or reject software updates. Whether you have a rooted Fire TV or not, this guide will show you all the methods for blocking software updates on Fire TV devices.

Method 1: Block on Fire TV (Requires Root)

This method disables the service running on the Fire TV which checks for updates. Your Fire TV must be rooted to use this method. If your Fire TV is rooted, this is the recommended method, but it’s always a good idea to also use Method 3 to block updates via your router in case the update service gets re-enabled, which happens after a factory reset.

Pros

Does not require router or DNS setting changes.

Updates remain blocked when using Fire TV outside of your home network.

Disables updates on the device itself.

Cons

Requires Root.

Updates will be re-enabled after a factory reset.

Method 1 Guide

Your Fire TV must be rooted. Otherwise, use one of the other methods to block software updates.

To re-enable updates, simply follow this guide again but replace disable with enable in step 5. Alternatively, performing a factory reset will also re-enable updates. Updates will not be re-enabled when installing custom ROMs.

Method 2: Block on Fire TV (Without Root)

This method requires Fire OS 5.0.0 thru 5.0.5.1 to be installed on your Fire TV or Fire TV Stick to work. The only way to block updates on version 5.2.1.0 and up is to either be rooted and use method 1, or use method 3 or 4 to block updates externally. If your device is rooted, you should follow method 1 instead of this method. This method ‘hides’ the update service on the device, which prevents updates, whereas method 1 disables it. It’s always a good idea to also use Method 3 or 4 to externaly block updates in case the update service gets re-enabled, which happens after a factory reset.

Pros

Does not require router or DNS setting changes.

Updates remain blocked when using Fire TV outside of your home network.

Disables updates on the device itself.

Cons

Updates will be re-enabled after a factory reset.

Method 2 Guide

Run the command: adb shell pm hide com.amazon.device.software.ota
(If the message “unknown command hide” appears, it’s because this only works on software version 5.0 and up, as I stated above. You need to use method 3 or 4 instead.)

Run the command: exit

To re-enable updates, simply follow this guide again but replace hide with unhide in step 2. Alternatively, performing a factory reset will also re-enable updates.

Method 3: Block updates via Router

This method uses your router’s parental controls to block the domains that the Fire TV accesses when downloading updates. Even if you used method 1 on a rooted device or method 2 on an unrooted device, it’s still a good idea to also use this method. For this method to work, your router MUST be able to block both HTTP and HTTPS requests. Many routers cannot block HTTPS requests.

Pros

Does not require Root.

Cons

Depends on router's settings and abilities

Will not work for many routers do to inability to block HTTPS requests.

Updates will not be blocked if Fire TV is connected to a different network.

Method 3 Guide

Access your router’s parental control settings and block the following four domains:

REQUIRED: amzdigital-a.akamaihd.net

REQUIRED: amzdigitaldownloads.edgesuite.net

OPTIONAL: softwareupdates.amazon.com

OPTIONAL: updates.amazon.com

The first two domains listed are the most important ones to block and the only ones required. These are the domains where the update file is downloaded from. With only these domains blocked, your Fire TV will be able to determine that an update is available, but will not be able to download the update. The third and fourth domains are used by the Fire TV to determine if an update is available.

Every router’s parental control settings are different, so I can’t guide you on specifically how to block domains using your router. If you’re unsure how to do it, check your router’s manual or search the internet for instructions for your specific router model.

To test if your router can block HTTPS requests, set it up to block the above domains and then try downloading this file. If the download fails, then your router can block HTTPS requests.

Here are screenshots of various router parental control screens to help you understand what you are looking to achieve:

Method 4: Block updates via OpenDNS

This method is your last resort if you don’t have access to your router’s settings, or your router is incapable of reliably blocking updates using method 3. This method routes your Fire TV’s web traffic through a service called OpenDNS which can block the domains the Fire TV needs to access in order to update.

Pros

Does not require Root.

Does not require router setting changes.

Cons

Relies on a 3rd-party service that may not stay free.

Requires DNS changes.

Updates will not be blocked if your home IP changes.

Updates will not be blocked if Fire TV is connected to a different network.

Method 4 Guide

Sign up for OpenDNS. The name might change, but currently, the plan you want is the “Personal OpenDNS HOME FREE” plan. Be sure to confirm your email address to fully enable your account.

Using the “Manage individual domains” area at the bottom of the page, add the following four domains set to “Always block”:

amzdigital-a.akamaihd.net

amzdigitaldownloads.edgesuite.net

softwareupdates.amazon.com

updates.amazon.com

Your configuration should look like this:

Follow this guide to configure your Fire TV to use OpenDNS’s nameservers. The two nameserver IP address should be listed at the bottom of your OpenDNS dashboard page. Currently, they are 208.67.222.222 and 208.67.220.220

When using OpenDNS, you need to ensure you update the service if your home IP changes. They have utilities you can install on your PC to do this automatically. If your home IP changes and you don’t update OpenDNS, your Fire TV may be able to access updates.

Method 5: Block on Fire TV by setting a Custom Software Version Number (Requires Root)

This method blocks software updates by setting a custom OS version number so the device does not know which update to download. This should be done in addition to method 1 as a backup. The added advantage of this method is that it can be done within TWRP custom recovery. That means, you can have updates blocked on the device itself BEFORE completing the initial setup process. If you are factory reseting a rooted Fire TV, it is highly recommended that you implement this blocking method so that you don’t install an OTA update during the initial setup process.

Pros

Does not require router or DNS setting changes.

Updates remain blocked when using Fire TV outside of your home network.

Disables updates on the device itself.

Will block updates BEFORE starting the initial setup process. (Only method that can do this.)

Survives a factory reset.

Cons

Requires Root.

Updates will be re-enabled after installing any ROM. This must be redone every time you install a new ROM.

114 comments

I’ve heard mixed things on how the dev preview will react to the OS 5 public roll out. Some say it will automatically updated to public, some say it will not. I’ve seen that some dev preview devices are getting dev preview updates (this was days ago) however my dev preview stick is still on the original 5.0 dev preview and won’t see 5.0.3 dev preview update. Does anyone outside of the new AFTV2 currently have the public version? Just overall a little confused.

Need help have 2nd generation and block update but when I try to start my box it says unable to update amazon fire tv and will not let me continue past this screen it lets me go back but then it try to update and get same screen

Same issue, would be nice if someone could get back to us on this. I block them 4 domains on my router and I can’t access my home menu on my firestick, I’ve also tried just blocking the two required domains and still no luck. Please update as method 3 and 4 now seems obsolete.
So if you’re 5.0.5.1+ and not rooted I’m guessing you can’t disable updates???

If you are talking about a normal computer, used for a wide variety of things, then I completely agree about not blocking updates. But a FireTV? It’s really more of an appliance focused on TV viewing and games. The FireTV sits behind a router, so nothing scanning your home Internet connection is going to hit it. You have a better chance of getting a virus by side-loading something on it. I’m actually hoping that at least the first versions of the new OS are vulnerable something that allows a jailbreak, so people can jailbreak FireTV 2’s.

AFTV is a very small box but consider powerful Quad core and enough RAM to transform botnet node. I’m sure you heard about home routers reputation on security front ( Netgear router just happened to be on the news yesterday but other brands are no different in my opinion).

IoT Android/Linux appliances are on the hot seats nowadays according security researchers.

My fire tv and tv stick just auto updated yesterday and to my surprise amazon has partially block kodi. When you click on the application on both devices it opens kodi and it runs for a couple of seconds maybe 15 to 25 sec and after that it goes out of kodi automatically. My advice to anyone running kodi on fire tv and fire stick is to try any of the methods described above so you can avoid re installing and factory resetting which it is what i have to do now.

I bought a Fire TV w/voice and plugged it in before understanding what was needed to “jailbreak” it. I’m pretty sure the software updated immediately. Now that I’ve read what is needed to jailbreak one, they are all saying to jailbreak it first, before the update.

Will a factory reset wipe out the update and allow me to jailbreak it???

Hey there,
You should definitely add the block method with adbfire connection. After Fire OS 5.0.5 update we are able to block the update via ADB connection and just hide the necessary OTA Update package and apk’s.

I am trying to block software updates on my firetv (without root) as you have suggested in your last post and run into a problem. I open adb shell and type the command you’ve shown but here what it says:

Maybe they closed this down. As soon as i try to block those adresses from accessing it through my router, firetv and fire tv stick both immediately loose network connection completely. If i remove that filter, it all runs fine again (i used method 3 on a avm router.)

How do I block a NEW FireStick from updates when I first plug it in? Method 3 (router) is not working for me as my router does not block https sites. The other 3 methods require me to register the box first. How do I proceed?

Method 4 does not require the box to be registered first. After you setup OpenDNS to block the domains, you just need to enter the OpenDNS IP in the advanced settings when you connect the Stick to your WiFi network.

well then can you make a guide on how to do this then because your guide on this says that you need to get values in the settings menu to set up open DNS but we can’t get into setting menu now can we
we cant do your “optional”
step 3 , in your setting up DNS guide because we can’t get into the settings menu yet
and we cant do steps 7 and 9 either because we can not do the “optional” step 3 so how do we get those values then when we can;t even get into setting menu?

I bought a new Fire-tv 2 4k and used method 3 and 4 to block OTA updates before trying to set it up. It checks for updates, tries to download(which fails) and leaves me at the screen saying it was unable to update so it never let’s me get to the registration screen. How do I get past this?

FireStarter is pretty much dead now with new Amazon update. This isn’t good considering that people now cannot update the current Kodi versions manually. (without a computer)

I went to “manage applications” and FireStarter was nowhere to be seen anymore. I reloaded it and it said “filtering installed apps” and once again FireStarter was nowhere to manually start. Right now, the Kodi icon is on Amazons home screen. (no more FireStarter)
This is NOT good considering Amazon is one step away from now blocking Kodi all together.
Amazon is blocking the rooting. I’m not liking what I see now.

Use firestopper app exactly the same as firestarter but it works,then you can update kodi with out needing a computer,just google firestopper.apk dload the file,then google adbfire and down load the app,go on youtube to see how to set it up, pretty easy to follow,once installed use just the same as firestarter :)

For those getting the unknown command error, what I had to do on one of my fire sticks is toggle dev adb mode in my fire tv settings off/on about four times and then retry and it worked. Also, this method 2 only works on OS5 and above.

Method 2 worked for me. One of my fire boxes is still the previous version 5.0.5 prior to Alexa. And after method 2,it will not update and gets errors when checking for updates. Exactly what I wanted. Should this be update proof now as long as its not factory reset? Also, if one did need to factory reset, could I redo method 2 before allowing it to connect to the Internet, which it immediately does after reset to look for updates. Does anyone have any strategy for this?

I have used method 3 on my linksys router which does block both http and https. The parental controls are per device connected to the router so I’ve naturally set them on the fire tv connection. However the latest software update still got installed. I copy and pasted the addresses so there are no typos and this time I remembered to actually turn parental controls on! It’s not been connected to a different network. Any ideas?

I had to use Method 4 as I did a factory reset and can’t get access to the unit until it’s set up (oh and my router doesn’t block https). However, now that I’ve done that my screen is just hanging at “checking for updates”. Anyone else experienced this or knows why it could be happening?

Method No. 3 causes network error messages and the start screen can’t be loaded.
Actually the start screen is not such a big deal for me but the error messages lead to a shut down of kodi after the auto start by fire starter.

Yet another datapoint with a FTV2. 4 domains blocked at router with http and https, FTV2 connected with ethernet cable. I had no success in getting past the Checking for updates… screen with any variety of pulling network cable out, tried it 10 times? Finally removed the “optional” two domains from the blocklist and it worked the first time. So those 2 definitely cause probs with the new FTV2 when blocked. Thanks for all the info!

Dont feel bad its not worth the effort. I supposedly had updates blocked on the box had followed the guides exactly. Also had updates blocked on the router. Router went bad and put in another forgetting about the blocking. Figured I was fine cuz had updates blocked on box but it updated anyway. Using a Nexus Player now and so much better cuz its open not locked down firetv garbage with its garbage ui. Would recommend a mi box nowadays though.

I think blocking via a alternate version number doesn’t work. I can go through the process and modify the build.prop file and change the version number, then use terminal to confirm I installed the file correctly (even chmodding 775) and when I go in to Settings to check for updates, it checks for them anyway.

It’s not until I use the pm disable command that the check for updates gives an error message.

I seemed to have blocked updates on my Firestick2 by side-loading Grey Shirts NoRoot Firewall 3.0.1 from APKMirror. Navigation is a bit difficult with the remote but on the Pending Request menu, while focus is on the menu bar, clicking right, right will eventually drop to the top pending request allowing me to select Allow or Deny. I allowed every request except the “com.amazon.device.software.ota.override.deviceSoftwareOTA” I’m only at day 2 but I’ve restarted and everything seems OK and the updates are failing. Don’t forget to tick the Run at Startup.

My Fire TV Stick 2 updated today despite having blocked updates using OpenDNS method….
Maybe it checked for updates in the period of time between my WAN ip address changed and it was updated in dnsomatic….